new secrets management system

This commit is contained in:
Noah Masur
2022-10-16 01:32:39 +00:00
parent e2c351098b
commit 69a54b99c8
8 changed files with 188 additions and 43 deletions

View File

@ -1,25 +1,25 @@
{ config, pkgs, lib, ... }: {
options = {
identityFile = lib.mkOption {
type = lib.types.str;
description = "Path to SSH key for age";
default = "${config.homePath}/.ssh/id_ed25519";
};
# identityFile = lib.mkOption {
# type = lib.types.str;
# description = "Path to SSH key for age";
# default = "${config.homePath}/.ssh/id_ed25519";
# };
};
config = {
home-manager.users.${config.user}.home.packages = with pkgs; [ age ];
system.activationScripts.age.text = ''
if [ ! -f "${config.identityFile}" ]; then
$DRY_RUN_CMD echo -e \nEnter the seed phrase for your SSH key...\n
$DRY_RUN_CMD echo -e \nThen press ^D when complete.\n\n
$DRY_RUN_CMD ${pkgs.melt}/bin/melt restore ${config.identityFile}
$DRY_RUN_CMD chown ${config.user}:wheel ${config.identityFile}*
$DRY_RUN_CMD echo -e \n\nContinuing activation.\n\n
fi
'';
# system.activationScripts.age.text = ''
# if [ ! -f "${config.identityFile}" ]; then
# $DRY_RUN_CMD echo -e \nEnter the seed phrase for your SSH key...\n
# $DRY_RUN_CMD echo -e \nThen press ^D when complete.\n\n
# $DRY_RUN_CMD ${pkgs.melt}/bin/melt restore ${config.identityFile}
# $DRY_RUN_CMD chown ${config.user}:wheel ${config.identityFile}*
# $DRY_RUN_CMD echo -e \n\nContinuing activation.\n\n
# fi
# '';
};
}